Now booking Q1 Intune migrations — talk to an engineer.

CyberSystem
← Back to Blog

Intune Troubleshooting: Complete Guide

Learn how to troubleshoot common Intune issues including device enrollment, policy deployment, app installation, compliance problems, and configuration errors.

By Ali Alame•
intunetroubleshootingdevice-managementpoliciesenrollmentcompliancesupport

Troubleshooting Intune issues requires a systematic approach to identify and resolve problems with device enrollment, policy deployment, app installation, and compliance. This guide provides comprehensive troubleshooting strategies and solutions for common Intune issues.

Understanding Intune Troubleshooting

Effective troubleshooting in Intune involves understanding device check-in cycles, policy refresh intervals, and how different components interact. The built-in troubleshooting tools and reports provide valuable insights into device and policy status.

Key Troubleshooting Tools

  1. Troubleshoot Pane: Built-in troubleshooting for users and devices
  2. Device Status Reports: Policy and compliance status
  3. Event Logs: Windows event logs for device-side issues
  4. Intune Logs: Management Extension and service logs

For an overview, see Troubleshooting policies and profiles in Microsoft Intune.

Using the Troubleshoot Pane

Access Troubleshoot

  1. Sign in to the Microsoft Intune admin center
  2. Navigate to Troubleshooting + support > Troubleshoot
  3. Select Select user
  4. Choose the user experiencing issues

Review User Status

Check the following:

  • Intune license: Should show green check
  • Device enrollment: Should be MDM or EAS/MDM
  • Microsoft Entra join type: Should be Workplace or AzureAD
  • Intune compliant: Should be Yes
  • Microsoft Entra compliant: Should be Yes
  • Last check-in: Should be recent (within 24 hours)

Review Device Status

For each device:

  1. Select the device
  2. Review Device Compliance status
  3. Review Device Configuration status
  4. Check for conflicts or errors

For detailed guidance, see Troubleshooting policies and profiles in Microsoft Intune.

Common Issues and Solutions

Issue 1: Device Not Enrolling

Symptoms:

  • Device doesn't appear in Intune
  • Enrollment fails with error
  • User can't complete enrollment

Troubleshooting Steps:

  1. Verify user has Intune license
  2. Check enrollment restrictions
  3. Verify automatic enrollment is configured
  4. Check device meets requirements
  5. Review enrollment logs

Solutions:

  • Assign Intune license to user
  • Adjust enrollment restrictions
  • Configure automatic enrollment
  • Verify device compatibility
  • Check network connectivity

For guidance, see Troubleshooting Windows device enrollment errors in Intune.

Issue 2: Policies Not Applying

Symptoms:

  • Policies show as pending
  • Policies show errors
  • Settings not configured on device

Troubleshooting Steps:

  1. Verify device enrollment
  2. Check device check-in status
  3. Review policy assignments
  4. Check for policy conflicts
  5. Verify device meets requirements

Solutions:

  • Ensure device is enrolled
  • Force device check-in
  • Verify policy assignments
  • Resolve policy conflicts
  • Check device compatibility

For details, see Troubleshooting policies and profiles in Microsoft Intune.

Issue 3: Apps Not Installing

Symptoms:

  • App shows as failed
  • App not appearing on device
  • Installation timeout

Troubleshooting Steps:

  1. Verify app assignments
  2. Check device requirements
  3. Review installation logs
  4. Check for installation conflicts
  5. Verify app compatibility

Solutions:

  • Verify app is assigned correctly
  • Check device meets requirements
  • Review installation command
  • Test installation manually
  • Check for conflicting apps

Issue 4: Compliance Issues

Symptoms:

  • Device marked as noncompliant
  • Compliance policies not evaluating
  • Conditional Access blocking access

Troubleshooting Steps:

  1. Review compliance policy assignments
  2. Check device compliance status
  3. Review per-setting compliance
  4. Verify device check-in
  5. Check compliance policy settings

Solutions:

  • Verify compliance policy assignments
  • Address noncompliant settings
  • Force device check-in
  • Review compliance policy configuration
  • Check grace period settings

For guidance, see Monitor results of your Intune Device compliance policies.

Issue 5: Configuration Conflicts

Symptoms:

  • Settings show as conflict
  • Policies not applying correctly
  • Unexpected device behavior

Troubleshooting Steps:

  1. Review all assigned policies
  2. Identify conflicting settings
  3. Check conflict resolution rules
  4. Review policy precedence
  5. Resolve conflicts

Solutions:

  • Remove conflicting policies
  • Adjust policy settings
  • Use scope tags to organize
  • Understand conflict resolution
  • Document policy relationships

For details, see View and monitor device configuration policies in Microsoft Intune.

Device Check-In and Refresh Cycles

Understanding Check-In Cycles

Devices check in with Intune:

  • Default: Every 8 hours
  • After enrollment: Immediately
  • After policy change: Within 8 hours
  • Manual sync: User can force sync

Forcing Device Check-In

Windows:

  1. Open Settings > Accounts > Access work or school
  2. Select the account
  3. Select Info > Sync

iOS/iPadOS:

  1. Open Company Portal app
  2. Go to Devices
  3. Select device > Check Settings

Android:

  1. Open Company Portal app
  2. Go to Devices
  3. Select device > Check Device Settings

Reviewing Logs

Windows Event Logs

Location: Event Viewer > Applications and Services Logs > Microsoft > Windows > DeviceManagement-Enterprise-Diagnostics-Provider

Key Events:

  • Event 306: Policy received
  • Event 307: Policy applied
  • Event 308: Policy error

Intune Management Extension Logs

Location: %ProgramFiles(x86)%\Microsoft Intune Management Extension\Logs

Log Files:

  • IMEAgent.log
  • IMESetup.log
  • IMEDownloadContent.log

Best Practices

1. Use Troubleshoot Pane First

  • Start with built-in troubleshooting
  • Review user and device status
  • Check policy assignments
  • Identify obvious issues

2. Check Device Status

  • Verify device enrollment
  • Check last check-in time
  • Review compliance status
  • Check for errors

3. Review Policy Assignments

  • Verify policies are assigned
  • Check group membership
  • Review scope tags
  • Verify policy compatibility

4. Test Incrementally

  • Test with single device first
  • Verify fix before expanding
  • Document solutions
  • Share knowledge

5. Monitor Regularly

  • Review reports weekly
  • Address issues promptly
  • Track recurring problems
  • Improve processes

Additional Resources

Conclusion

Effective troubleshooting requires a systematic approach and understanding of Intune's components. By following these best practices:

✅ Use troubleshoot pane as starting point
✅ Check device status and check-in
✅ Review policy assignments
✅ Test solutions incrementally
✅ Monitor and document issues

You can efficiently identify and resolve Intune issues, ensuring your device management environment remains healthy and functional.

Remember: Most Intune issues relate to device check-in, policy assignments, or device requirements. Start with the troubleshoot pane and work through common issues systematically.